CVE-2026-19176

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment, potentially allowing further system compromise.

An IMPORTANT severity use-after-free flaw was found in Skia, a 2D graphics library used for graphics rendering in web browsers and email clients, affecting multiple Red Hat products. A remote attacker who has already compromised the renderer process of an application using Skia could exploit this flaw by tricking a user into loading a specially crafted HTML page, triggering a use-after-free that allows the attacker to execute arbitrary code within the application's sandbox and potentially achieve further system compromise. Because exploitation requires the attacker to already control the renderer process, Red Hat scores this flaw with a local attack vector and scope change (CVSS 8.2, IMPORTANT), while upstream Google rates the corresponding Chromium issue as High severity. Red Hat products that bundle affected Skia code are impacted, including the chromium, firefox, thunderbird, and webkitgtk component families across Red Hat Enterprise Linux, Fedora, and EPEL; Thunderbird in the RHEL 8 BRP is not affected. Fixes for the affected products are being pursued.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.